Non notée

CVE-2019-17560 The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads

Description

The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache NetBeans	Versions non publiées

Les 3 CVE de Apache NetBeans →

CVE-2020-11986 To be able to analyze gradle projects, the build scripts need to be executed Non notée CVE-2019-17561 The "Apache NetBeans" autoupdate system does not fully validate code signatures Non notée

Vous utilisez Apache NetBeans ?

Suivre cette CVE Surveiller Apache NetBeans Vérifier mes SBOM

www.cveye.io/fr/cve/CVE-2019-17560

Chronologie

Publiée 30 mars 2020
Dernière modification 5 août 2024

Références

www.oracle.com www.oracle.com
lists.apache.org lists.apache.org

Suivre cette CVE

CVE-2019-17560 The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads

Description

Produits et versions touchés

Autres CVE de Apache NetBeans